Beveiligingsadvies

CVE-2023-46734

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-10 17:49:55

Laatst bijgewerkt 2025-02-13 17:14:33

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don't actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.

← Alle CVE's bekijken Bekijk op cve.org ↗